@pleri/olam-cli 0.1.12 → 0.1.14

package/dist/commands/__tests__/upgrade.olam-tag.test.js

@@ -0,0 +1,127 @@
+/**
+ * Verifies that build-{host-cp,auth,devbox}.sh accept an OLAM_TAG env var
+ * that retags the freshly-built image with an additional alias (Phase 2a — A3).
+ *
+ * The CLI's atomic-swap workflow (A6) needs all three scripts to produce
+ * `<image>:olam-next` tags during the staged-build window so canonical tags
+ * (`:latest` for host-cp/devbox, `:local` for auth) stay untouched until the
+ * final 6-tag swap.
+ *
+ * Default unset → no retag → backward-compat with manual `bash build-*.sh`
+ * invocation.
+ *
+ * This test reads each script as TEXT and asserts the retag block is present
+ * + correctly placed (after the docker build). A real docker integration test
+ * lives at tests/integration/build-scripts-olam-tag.sh (manual smoke; not run
+ * in CI without a docker daemon).
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.olam-tag.test.ts`
+ */
+import { describe, it, expect } from 'vitest';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+// Resolve to the repo root regardless of which workspace cwd vitest runs from.
+function findRepoRoot(start) {
+    let dir = start;
+    for (let i = 0; i < 10; i++) {
+        if (fs.existsSync(path.join(dir, 'packages', 'host-cp', 'compose.yaml')))
+            return dir;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    throw new Error(`Could not find repo root from ${start}`);
+}
+const REPO_ROOT = findRepoRoot(process.cwd());
+const SCRIPTS_DIR = path.join(REPO_ROOT, 'packages', 'adapters', 'src', 'docker');
+const SCRIPTS = [
+    {
+        name: 'build-host-cp.sh',
+        path: path.join(SCRIPTS_DIR, 'build-host-cp.sh'),
+        canonicalTagPattern: /olam-host-cp:latest/,
+        retagSourceVar: 'olam-host-cp:latest',
+    },
+    {
+        name: 'build-auth.sh',
+        path: path.join(SCRIPTS_DIR, 'build-auth.sh'),
+        canonicalTagPattern: /olam-auth:local/,
+        retagSourceVar: 'olam-auth:local',
+    },
+    {
+        name: 'build-devbox.sh',
+        path: path.join(SCRIPTS_DIR, 'build-devbox.sh'),
+        canonicalTagPattern: /IMAGE_TAG="olam-devbox:latest"/,
+        retagSourceVar: '$IMAGE_TAG',
+    },
+];
+describe('build-*.sh — OLAM_TAG opt-in retag (Phase 2a A3)', () => {
+    for (const script of SCRIPTS) {
+        describe(script.name, () => {
+            let body;
+            it('script file exists', () => {
+                expect(fs.existsSync(script.path)).toBe(true);
+                body = fs.readFileSync(script.path, 'utf-8');
+                expect(body.length).toBeGreaterThan(100);
+            });
+            it('preserves the canonical (default) tag for backward-compat', () => {
+                body ??= fs.readFileSync(script.path, 'utf-8');
+                expect(body).toMatch(script.canonicalTagPattern);
+            });
+            it('contains the OLAM_TAG conditional block', () => {
+                body ??= fs.readFileSync(script.path, 'utf-8');
+                // The block guards on `if [ -n "${OLAM_TAG:-}" ]; then`
+                expect(body).toMatch(/if\s*\[\s*-n\s+"\$\{OLAM_TAG:-\}"\s*\]\s*;\s*then/);
+            });
+            it('issues a docker tag command inside (or after the start of) the OLAM_TAG block', () => {
+                body ??= fs.readFileSync(script.path, 'utf-8');
+                // Find the OLAM_TAG block opening; assert `docker tag` appears
+                // somewhere after that (could be inside a nested-conditional fi
+                // for the devbox 2-axis case, so we don't try to extract the
+                // exact closing fi — that's regex-fragile).
+                const blockStart = body.search(/if\s*\[\s*-n\s+"\$\{OLAM_TAG:-\}"\s*\]/);
+                expect(blockStart).toBeGreaterThan(0);
+                const after = body.slice(blockStart);
+                expect(after).toMatch(/docker\s+tag\b/);
+            });
+            it('OLAM_TAG block appears AFTER the docker build invocation', () => {
+                body ??= fs.readFileSync(script.path, 'utf-8');
+                const buildIdx = body.search(/docker\s+(?:compose\s+(?:-f\s+\S+\s+)?)?build\b/);
+                const olamTagIdx = body.search(/if\s*\[\s*-n\s+"\$\{OLAM_TAG:-\}"\s*\]/);
+                expect(buildIdx).toBeGreaterThan(0);
+                expect(olamTagIdx).toBeGreaterThan(0);
+                expect(olamTagIdx).toBeGreaterThan(buildIdx);
+            });
+            it('retag source uses the canonical tag (backward-compat invariant)', () => {
+                body ??= fs.readFileSync(script.path, 'utf-8');
+                const blockStart = body.search(/if\s*\[\s*-n\s+"\$\{OLAM_TAG:-\}"\s*\]/);
+                expect(blockStart).toBeGreaterThan(0);
+                const after = body.slice(blockStart);
+                // Source of `docker tag <source> <dest>` must reference the canonical
+                // tag (or its variable, for build-devbox.sh).
+                if (script.name === 'build-devbox.sh') {
+                    expect(after).toMatch(/docker tag\s+"\$IMAGE_TAG"/);
+                }
+                else {
+                    expect(after).toContain(script.retagSourceVar);
+                }
+            });
+        });
+    }
+});
+describe('build-devbox.sh — OLAM_TAG × OLAM_DEVBOX_PLATFORM 2-axis composition', () => {
+    let body;
+    it('reads the file', () => {
+        body = fs.readFileSync(path.join(SCRIPTS_DIR, 'build-devbox.sh'), 'utf-8');
+    });
+    it('handles the latest case (no platform suffix → flat OLAM_TAG)', () => {
+        body ??= fs.readFileSync(path.join(SCRIPTS_DIR, 'build-devbox.sh'), 'utf-8');
+        expect(body).toMatch(/if\s*\[\s*"\$IMAGE_PLATFORM_SUFFIX"\s*=\s*"latest"\s*\]/);
+    });
+    it('composes <repo>:<platform>-<olam-tag> for non-latest platforms', () => {
+        body ??= fs.readFileSync(path.join(SCRIPTS_DIR, 'build-devbox.sh'), 'utf-8');
+        // Should include ${IMAGE_PLATFORM_SUFFIX}-${OLAM_TAG} in the else branch.
+        expect(body).toMatch(/\$\{IMAGE_PLATFORM_SUFFIX\}-\$\{OLAM_TAG\}/);
+    });
+});
+//# sourceMappingURL=upgrade.olam-tag.test.js.map

package/dist/commands/__tests__/upgrade.olam-tag.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.olam-tag.test.js","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.olam-tag.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AASlF,MAAM,OAAO,GAA6B;IACxC;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC;QAChD,mBAAmB,EAAE,qBAAqB;QAC1C,cAAc,EAAE,qBAAqB;KACtC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC;QAC7C,mBAAmB,EAAE,iBAAiB;QACtC,cAAc,EAAE,iBAAiB;KAClC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC;QAC/C,mBAAmB,EAAE,gCAAgC;QACrD,cAAc,EAAE,YAAY;KAC7B;CACF,CAAC;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACzB,IAAI,IAAY,CAAC;YAEjB,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;gBAC5B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;gBACnE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;gBACjD,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,wDAAwD;gBACxD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;gBACvF,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,+DAA+D;gBAC/D,gEAAgE;gBAChE,6DAA6D;gBAC7D,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC;gBACzE,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;gBAClE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC;gBAChF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC;gBACzE,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACpC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACtC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;gBACzE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC;gBACzE,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACrC,sEAAsE;gBACtE,8CAA8C;gBAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACtC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,IAAI,IAAY,CAAC;IAEjB,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;QACxB,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,0EAA0E;QAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/__tests__/upgrade.poll.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Phase 2a A8 — verifies waitForVersionMatch + formatVersionMismatch.
+ *
+ * Uses vi.spyOn(global, 'fetch') to mock /api/version/status responses
+ * and assert the polling loop:
+ *   - Returns matched=true when all three SHAs equal target.
+ *   - Returns matched=false on timeout when SHAs never converge.
+ *   - Tolerates transient fetch failures (host-cp restart blackout).
+ *   - Returns the LAST snapshot received for diagnostic display.
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.poll.test.ts`
+ */
+export {};
+//# sourceMappingURL=upgrade.poll.test.d.ts.map

package/dist/commands/__tests__/upgrade.poll.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.poll.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.poll.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/commands/__tests__/upgrade.poll.test.js

@@ -0,0 +1,136 @@
+/**
+ * Phase 2a A8 — verifies waitForVersionMatch + formatVersionMismatch.
+ *
+ * Uses vi.spyOn(global, 'fetch') to mock /api/version/status responses
+ * and assert the polling loop:
+ *   - Returns matched=true when all three SHAs equal target.
+ *   - Returns matched=false on timeout when SHAs never converge.
+ *   - Tolerates transient fetch failures (host-cp restart blackout).
+ *   - Returns the LAST snapshot received for diagnostic display.
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.poll.test.ts`
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { waitForVersionMatch, formatVersionMismatch } from '../upgrade.js';
+const TARGET_SHA = 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa';
+const OTHER_SHA = 'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb';
+function makeSnapshot(hostCp, authService, devbox) {
+    return {
+        hostCp: { running: hostCp, latest: TARGET_SHA, upgradeAvailable: hostCp !== TARGET_SHA },
+        authService: { running: authService, latest: TARGET_SHA, upgradeAvailable: authService !== TARGET_SHA },
+        devbox: { running: devbox, latest: TARGET_SHA, upgradeAvailable: devbox !== TARGET_SHA },
+        operatorHead: TARGET_SHA,
+        checkedAt: '2026-05-07T00:00:00.000Z',
+    };
+}
+function mockFetchResponse(snapshot) {
+    return new Response(JSON.stringify(snapshot), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+describe('waitForVersionMatch — happy path', () => {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let fetchSpy;
+    beforeEach(() => {
+        fetchSpy = vi.spyOn(global, 'fetch');
+    });
+    afterEach(() => {
+        fetchSpy.mockRestore();
+    });
+    it('returns matched=true when all three SHAs already equal target on first poll', async () => {
+        const snapshot = makeSnapshot(TARGET_SHA, TARGET_SHA, TARGET_SHA);
+        fetchSpy.mockResolvedValue(mockFetchResponse(snapshot));
+        const result = await waitForVersionMatch(TARGET_SHA, 5_000, 100);
+        expect(result.matched).toBe(true);
+        expect(result.snapshot).toEqual(snapshot);
+    });
+    it('returns matched=true after SHA propagation completes mid-poll', async () => {
+        const stale = makeSnapshot(OTHER_SHA, OTHER_SHA, OTHER_SHA);
+        const partial = makeSnapshot(TARGET_SHA, OTHER_SHA, OTHER_SHA);
+        const fresh = makeSnapshot(TARGET_SHA, TARGET_SHA, TARGET_SHA);
+        fetchSpy
+            .mockResolvedValueOnce(mockFetchResponse(stale))
+            .mockResolvedValueOnce(mockFetchResponse(partial))
+            .mockResolvedValueOnce(mockFetchResponse(fresh));
+        const result = await waitForVersionMatch(TARGET_SHA, 10_000, 50);
+        expect(result.matched).toBe(true);
+        expect(result.snapshot).toEqual(fresh);
+    });
+});
+describe('waitForVersionMatch — failure paths', () => {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let fetchSpy;
+    beforeEach(() => {
+        fetchSpy = vi.spyOn(global, 'fetch');
+    });
+    afterEach(() => {
+        fetchSpy.mockRestore();
+    });
+    it('returns matched=false on timeout when SHAs never converge', async () => {
+        const stale = makeSnapshot(OTHER_SHA, OTHER_SHA, OTHER_SHA);
+        fetchSpy.mockResolvedValue(mockFetchResponse(stale));
+        const result = await waitForVersionMatch(TARGET_SHA, 300, 50);
+        expect(result.matched).toBe(false);
+        expect(result.snapshot).toEqual(stale);
+    });
+    it('tolerates transient fetch errors (host-cp restart blackout)', async () => {
+        const fresh = makeSnapshot(TARGET_SHA, TARGET_SHA, TARGET_SHA);
+        fetchSpy
+            .mockRejectedValueOnce(new Error('ECONNREFUSED'))
+            .mockRejectedValueOnce(new Error('ECONNREFUSED'))
+            .mockResolvedValueOnce(mockFetchResponse(fresh));
+        const result = await waitForVersionMatch(TARGET_SHA, 5_000, 50);
+        expect(result.matched).toBe(true);
+        expect(result.snapshot).toEqual(fresh);
+    });
+    it('returns matched=false with snapshot=null when /api/version/status is never reachable', async () => {
+        fetchSpy.mockRejectedValue(new Error('ECONNREFUSED'));
+        const result = await waitForVersionMatch(TARGET_SHA, 200, 50);
+        expect(result.matched).toBe(false);
+        expect(result.snapshot).toBeNull();
+    });
+    it('returns matched=false when /api/version/status returns non-200', async () => {
+        fetchSpy.mockResolvedValue(new Response('Internal Server Error', { status: 500 }));
+        const result = await waitForVersionMatch(TARGET_SHA, 200, 50);
+        expect(result.matched).toBe(false);
+        expect(result.snapshot).toBeNull();
+    });
+});
+describe('formatVersionMismatch', () => {
+    it('renders 3-line per-component diff with ✓ / ✗ markers', () => {
+        const partial = makeSnapshot(TARGET_SHA, OTHER_SHA, OTHER_SHA);
+        const out = formatVersionMismatch(TARGET_SHA, partial);
+        expect(out).toMatch(/✓ host-cp/);
+        expect(out).toMatch(/✗ auth-service/);
+        expect(out).toMatch(/✗ devbox/);
+        expect(out).toContain(TARGET_SHA.slice(0, 8));
+        expect(out).toContain(OTHER_SHA.slice(0, 8));
+    });
+    it('handles null snapshot gracefully', () => {
+        expect(formatVersionMismatch(TARGET_SHA, null)).toMatch(/No \/api\/version\/status response/);
+    });
+    it('marks all components ✗ when none match target', () => {
+        const stale = makeSnapshot(OTHER_SHA, OTHER_SHA, OTHER_SHA);
+        const out = formatVersionMismatch(TARGET_SHA, stale);
+        expect((out.match(/✗/g) ?? []).length).toBe(3);
+        expect(out.match(/✓/g)).toBeNull();
+    });
+    it('marks all components ✓ when all match target', () => {
+        const fresh = makeSnapshot(TARGET_SHA, TARGET_SHA, TARGET_SHA);
+        const out = formatVersionMismatch(TARGET_SHA, fresh);
+        expect((out.match(/✓/g) ?? []).length).toBe(3);
+        expect(out.match(/✗/g)).toBeNull();
+    });
+});
+describe('VersionSnapshot type contract', () => {
+    it('exports a usable snapshot shape with three components + operatorHead + checkedAt', () => {
+        const sample = makeSnapshot(TARGET_SHA, TARGET_SHA, TARGET_SHA);
+        expect(sample.hostCp.running).toBe(TARGET_SHA);
+        expect(sample.authService.running).toBe(TARGET_SHA);
+        expect(sample.devbox.running).toBe(TARGET_SHA);
+        expect(sample.operatorHead).toBe(TARGET_SHA);
+        expect(sample.checkedAt).toBeTruthy();
+    });
+});
+//# sourceMappingURL=upgrade.poll.test.js.map

package/dist/commands/__tests__/upgrade.poll.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.poll.test.js","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.poll.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAwB,MAAM,eAAe,CAAC;AAEjG,MAAM,UAAU,GAAG,0CAA0C,CAAC;AAC9D,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D,SAAS,YAAY,CAAC,MAAc,EAAE,WAAmB,EAAE,MAAc;IACvE,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,KAAK,UAAU,EAAE;QACxF,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,KAAK,UAAU,EAAE;QACvG,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,KAAK,UAAU,EAAE;QACxF,YAAY,EAAE,UAAU;QACxB,SAAS,EAAE,0BAA0B;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAyB;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;QAC5C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,8DAA8D;IAC9D,IAAI,QAAa,CAAC;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAClE,QAAQ,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAE/D,QAAQ;aACL,qBAAqB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;aAC/C,qBAAqB,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;aACjD,qBAAqB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,8DAA8D;IAC9D,IAAI,QAAa,CAAC;IAElB,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5D,QAAQ,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/D,QAAQ;aACL,qBAAqB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;aAChD,qBAAqB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;aAChD,qBAAqB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/__tests__/upgrade.recreate.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Phase 2a A7 — verifies auth-service recreate via AuthContainerController.
+ *
+ * Source-text invariants (no docker required):
+ *   - upgrade.ts imports AuthContainerController from @olam/core
+ *   - recreateAuthService is invoked AFTER the compose recreate succeeds
+ *   - auth-recreate-fail branch surfaces --rollback hint (per audit A6-002)
+ *   - waitForAuthHealthLocal mirrors auth-upgrade.ts contract
+ *
+ * Running the actual recreateAuthService against a real auth-service
+ * container is covered by the manual smoke at tests/integration/upgrade-all-three.sh
+ * — too heavy for unit tests (requires the full olam-auth image + secret env).
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.recreate.test.ts`
+ */
+export {};
+//# sourceMappingURL=upgrade.recreate.test.d.ts.map

package/dist/commands/__tests__/upgrade.recreate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.recreate.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.recreate.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/commands/__tests__/upgrade.recreate.test.js

@@ -0,0 +1,95 @@
+/**
+ * Phase 2a A7 — verifies auth-service recreate via AuthContainerController.
+ *
+ * Source-text invariants (no docker required):
+ *   - upgrade.ts imports AuthContainerController from @olam/core
+ *   - recreateAuthService is invoked AFTER the compose recreate succeeds
+ *   - auth-recreate-fail branch surfaces --rollback hint (per audit A6-002)
+ *   - waitForAuthHealthLocal mirrors auth-upgrade.ts contract
+ *
+ * Running the actual recreateAuthService against a real auth-service
+ * container is covered by the manual smoke at tests/integration/upgrade-all-three.sh
+ * — too heavy for unit tests (requires the full olam-auth image + secret env).
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.recreate.test.ts`
+ */
+import { describe, it, expect } from 'vitest';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+function findRepoRoot(start) {
+    let dir = start;
+    for (let i = 0; i < 10; i++) {
+        if (fs.existsSync(path.join(dir, 'packages', 'host-cp', 'compose.yaml')))
+            return dir;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    throw new Error(`Could not find repo root from ${start}`);
+}
+const REPO_ROOT = findRepoRoot(process.cwd());
+const UPGRADE_TS = path.join(REPO_ROOT, 'packages', 'cli', 'src', 'commands', 'upgrade.ts');
+describe('Phase 2a A7 — auth-service recreate via AuthContainerController', () => {
+    let body;
+    it('reads upgrade.ts source', () => {
+        body = fs.readFileSync(UPGRADE_TS, 'utf-8');
+        expect(body.length).toBeGreaterThan(1000);
+    });
+    it('imports AuthContainerController from @olam/core', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        expect(body).toMatch(/import\s+\{\s*AuthContainerController\s*\}\s*from\s*['"]@olam\/core/);
+    });
+    it('declares AUTH_HEALTH_URL pointing at the auth-service port', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        expect(body).toContain('http://127.0.0.1:9999/health');
+    });
+    it('defines recreateAuthService helper', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        expect(body).toMatch(/async function recreateAuthService\(/);
+    });
+    it('recreateAuthService stops + removes + starts the container', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        // Look for the docker stop, docker rm, controller.start() sequence.
+        const fnMatch = body.match(/async function recreateAuthService[\s\S]*?\n\}/);
+        expect(fnMatch).not.toBeNull();
+        const fnBody = fnMatch[0];
+        expect(fnBody).toMatch(/docker.*stop.*olam-auth/);
+        expect(fnBody).toMatch(/docker.*rm.*olam-auth/);
+        expect(fnBody).toMatch(/new AuthContainerController\(\)/);
+        expect(fnBody).toMatch(/\.start\(\)/);
+        expect(fnBody).toMatch(/waitForAuthHealthLocal\(/);
+    });
+    it('integrates auth recreate AFTER the compose recreate of host-cp (in upgrade path, not rollback path)', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        // Scope to runUpgradeStepsWithLockHeld body, since handleRollback (B1)
+        // also calls recreateAuthService and would confuse a global search.
+        const upgradeFnStart = body.indexOf('async function runUpgradeStepsWithLockHeld');
+        expect(upgradeFnStart).toBeGreaterThan(0);
+        const upgradeBody = body.slice(upgradeFnStart);
+        const composeIdx = upgradeBody.indexOf('docker compose up --force-recreate failed');
+        const authRecreateCallIdx = upgradeBody.indexOf('recreateAuthService(');
+        expect(composeIdx).toBeGreaterThan(0);
+        expect(authRecreateCallIdx).toBeGreaterThan(composeIdx);
+    });
+    it('auth-recreate-fail branch surfaces --rollback hint (audit A6-002, upgrade path)', () => {
+        body ??= fs.readFileSync(UPGRADE_TS, 'utf-8');
+        // Scope to runUpgradeStepsWithLockHeld body — handleRollback's auth fail
+        // branch (B1) does NOT mention --rollback because it IS the rollback path.
+        const upgradeFnStart = body.indexOf('async function runUpgradeStepsWithLockHeld');
+        const upgradeBody = body.slice(upgradeFnStart);
+        const failBranch = upgradeBody.match(/Auth-service recreate failed[\s\S]*?process\.exitCode\s*=\s*1/);
+        expect(failBranch).not.toBeNull();
+        expect(failBranch[0]).toContain('--rollback');
+    });
+    it('mirrors auth-upgrade.ts recreate pattern (docker stop → rm → controller.start)', () => {
+        const authUpgradeTs = fs.readFileSync(path.join(REPO_ROOT, 'packages', 'cli', 'src', 'commands', 'auth-upgrade.ts'), 'utf-8');
+        // auth-upgrade.ts must contain the same primitive operations our helper
+        // mirrors. If auth-upgrade.ts ever migrates the pattern (e.g., moves to
+        // compose-driven), this test breaks loudly so we stay in sync.
+        expect(authUpgradeTs).toMatch(/docker.*stop.*olam-auth/);
+        expect(authUpgradeTs).toMatch(/docker.*rm.*olam-auth/);
+        expect(authUpgradeTs).toMatch(/new AuthContainerController\(\)/);
+    });
+});
+//# sourceMappingURL=upgrade.recreate.test.js.map

package/dist/commands/__tests__/upgrade.recreate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.recreate.test.js","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.recreate.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAE5F,QAAQ,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC/E,IAAI,IAAY,CAAC;IAEjB,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,oEAAoE;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC7E,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAQ,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qGAAqG,EAAE,GAAG,EAAE;QAC7G,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QAClF,MAAM,CAAC,cAAc,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACpF,MAAM,mBAAmB,GAAG,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,mBAAmB,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACtG,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CACnC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAC7E,OAAO,CACR,CAAC;QACF,wEAAwE;QACxE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACzD,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/__tests__/upgrade.rollback.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Phase 2b — verifies B1 (--rollback) + B2 (--force) + B3 (--no-cache) + B4 (drift refusal).
+ *
+ * Mix of:
+ *   - vi.spyOn unit tests for the parseUpgradeOpts shape (B1/B2/B3 flags).
+ *   - Real docker integration tests for performRollbackSwap + checkRollbackSetExists.
+ *   - Source-text invariants for the drift refusal at swap boundary (B4).
+ *
+ * Run: `cd packages/cli && npx vitest run src/commands/__tests__/upgrade.rollback.test.ts`
+ */
+export {};
+//# sourceMappingURL=upgrade.rollback.test.d.ts.map

package/dist/commands/__tests__/upgrade.rollback.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.rollback.test.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/upgrade.rollback.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}